Cherokee Federal Benefits Overview

Provides governance, risk, and compliance support for federal information systems under FISMA and the NIST RMF. Manages authorization activities, reviews FedRAMP packages, evaluates security controls, conducts risk and gap assessments, maintains SSPs, SARs, SAPs, and POA&Ms, and supports continuous monitoring. The role collaborates with system owners, ISSOs, cloud providers, and senior stakeholders; prepares compliance reporting and oversight responses; and contributes to cybersecurity policy, control tailoring, remediation, and quality assurance activities.

Supports federal privacy and cybersecurity compliance by conducting Privacy Threshold Assessments, Privacy Impact Assessments, and related reviews. Maintains SORNs, ISAs, MOUs, inventories, metrics, and audit-ready documentation. Advises system owners on PII protection and privacy integration throughout the SDLC, monitors federal privacy requirements, supports FISMA reporting, develops training materials, and recommends process improvements.

Manages federal cybersecurity Risk Management Framework and assessment and authorization activities. Develops and reviews SSPs, SAPs, SARs, and POA&Ms; evaluates NIST security controls; reviews FedRAMP authorization packages; conducts risk assessments; supports continuous monitoring, vulnerability remediation, and ongoing authorization. Engages system owners, ISSOs, cloud providers, authorizing officials, and senior stakeholders to maintain compliance with FISMA, NIST, and federal security requirements.